cracovia-hokej.pl
HTML metadata
Technology
- Server
- Apache
- Analytics
-
- Google Tag Manager
- Fonts
-
- Adobe Fonts
Third-party hosts loaded (2)
- use.typekit.net×1
- www.googletagmanager.com×1
Social
DNS records live
- NS
-
- ns1.comarch.pl
- ns2.comarch.pl
- ns3.comarch.pl
- MX
-
- 1 mail.cracovia-hokej.pl
- TXT
-
smv=06c59c456dbaea95
- Verified for
-
Email authentication partial
- SPF
-
v=spf1 a mx ip4:37.28.153.139 ~allsoftfail (~all) - DMARC
-
v=DMARC1;p=none;sp=none;pct=100;rua=mailto:dmarcreports@cracovia-hokej.pl;ruf=mailto:dmarcreports@cracovia-hokej.pl;policy: none (monitoring only) · sp=none - DKIM
- no key found at common selectors
Certificate (current)
RapidSSL TLS RSA CA G1
Expires in 162 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
DENY- x-content-type-options
nosniff- content-security-policy
default-src 'none'; script-src 'self' 'unsafe-inline' *.instagram.com platform.twitter.com cdn.bannerflow.com cdn.syndication.twimg.com www.google.com www.gstatic.com s.ytimg.com www.youtube.com www.googletagmanager.com www.google-analytics.com maps.googleapis.com connect.facebook.net; connect-src 'self' https://www.google-analytics.com wss://cracovia-hokej.pl:4201 noembed.com cdn.plyr.io *.tracker.bannerflow.com; img-src 'self' https://cracovia-hokej.pl cracovia.pl scontent.cdninstagram.com i.ytimg.com *.twimg.com *.twitter.com www.google-analytics.com maps.googleapis.com maps.gstatic.com www.facebook.com data:; media-src 'self'; style-src 'self' p.typekit.net use.typekit.net platform.twitter.com 'unsafe-inline' fonts.googleapis.com/css; font-src 'self' use.typekit.net fonts.gstatic.com; frame-src www.ekstraklasa.tv www.google.com www.youtube.com *.twitter.com www.facebook.com www.instagram.com cdn.bannerflow.com video-widget.oz.com- strict-transport-security
max-age=31536000; includeSubDomains
Links to (13)
- youtube.com×1
- x.com×1
- sklepccm.pl×1
- rmfmaxx.pl×1
- polskihokej.eu×1
- osheeshop.eu×1
- myfitnessplace.pl×1
- krakow.pl×1
- knhp.com.pl×1
- instagram.com×1
- facebook.com×1
- cracovia.pl×1
- canpack.com×1